CVE-2026-36989

Description

A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php.

Affected Platforms

Weakness Type

CWE-89

References

• https://gist.github.com/mathysEthical/8c3c426e89c6e48911acf8513fd1f075
• https://mathys.reboux.pro/CVE/2026/36989/